mod-security-users

[mod-security-users] About the bug i reported and a future request?

[DarkSniper <ro...@da...>]

Hey list.
i posted a bug about the keyword 'nolog' still logging to audit_log.
ivan asked me if i had RelevantOnly. and yes. i have that. :)

 about the future request...i do alot of testing on my machines to check
that
 i haven't overlooked something.
 would it be possible to add a keyword no_log for a specific host? so that
it
 doesn't log my own machines i mean.


 // DarkSniper

PS. Sorry if this is a double post, i've had trouble with my mail recently,
hopefully it's all fixed. DS.

Re: [mod-security-users] About the bug i reported and a future request?

[Ivan R. <iv...@we...>]

DarkSniper wrote:
> Hey list.
> i posted a bug about the keyword 'nolog' still logging to audit_log.
> ivan asked me if i had RelevantOnly. and yes. i have that. :)

   There will be a v1.7.4 release (probably tonight) fixing that bug
   and another "bug" in the Apache 2 version that confuses PHP under
   certain conditions.


> about the future request...i do alot of testing on my machines to check
> that
> i haven't overlooked something.
> would it be possible to add a keyword no_log for a specific host? so that
> it
> doesn't log my own machines i mean.

   Sure, I've added your request to my TODO list. I will do a lot
   of small improvements after 1.8 (practically in the CVS right now)
   so you can expect your feature in 1.9.

-- 
ModSecurity (http://www.modsecurity.org)
[ Open source IDS for Web applications ]

Re: [mod-security-users] About the bug i reported and a future request?

[DarkSniper <ro...@da...>]

> DarkSniper wrote:
> > Hey list.
> > i posted a bug about the keyword 'nolog' still logging to audit_log.
> > ivan asked me if i had RelevantOnly. and yes. i have that. :)
>
>    There will be a v1.7.4 release (probably tonight) fixing that bug
>    and another "bug" in the Apache 2 version that confuses PHP under
>    certain conditions.
>
>
> > about the future request...i do alot of testing on my machines to check
> > that
> > i haven't overlooked something.
> > would it be possible to add a keyword no_log for a specific host? so
that
> > it
> > doesn't log my own machines i mean.
>
>    Sure, I've added your request to my TODO list. I will do a lot
>    of small improvements after 1.8 (practically in the CVS right now)
>    so you can expect your feature in 1.9.

i can't wait to see the results. thnx alot man for this cool module! :)